Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-6195
2.6
LOWCVSS v3
Severity scale
010
Description
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.5 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. GitLab was vulnerable to Server Side Request Forgery when an attacker uses a malicious URL in the markdown image value when importing a GitHub repository.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.>= 16.10.0, < 16.10.5, >= 16.11.0, < 16.11.2, >= 15.5.0, < 16.9.7NVD
@semantic-release/gitlabNPMsemantic-release plugin to publish a GitLab release
NPMsemantic-release plugin to publish a GitLab release>= 16.10.0, < 16.10.5, >= 16.11.0, < 16.11.2, >= 15.5.0, < 16.9.7NVD
GitHub
Docker Hub
Crates.io
RubyGems